Alireza Eskandari created CLOUDSTACK-8009:
---------------------------------------------

             Summary: A secure password manager
                 Key: CLOUDSTACK-8009
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8009
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Virtual Router
    Affects Versions: 4.4.0, 4.3.0, 4.2.0, 4.1.0, 4.0.0, 4.5.0
            Reporter: Alireza Eskandari


Password management service uses plain text for transferring password over 
network.
In shared networks other instances can sniff traffics on port 8080 and see 
newly created passwords.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to